CVE-2018-1000117
MEDIUMCPython 3.2-3.6.4 - Buffer Overflow in os.symlink() on Windows
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2018-1000117. PoCs published by u0pattern.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in the `os.symlink()` function in Python versions 3.2 to 3.6.4 on Windows. The PoC triggers the vulnerability by creating a symlink with an excessively long path, potentially leading to arbitrary code execution or privilege escalation.
Description
Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5.
Exploits (1)
This exploit demonstrates a buffer overflow vulnerability in the `os.symlink()` function in Python versions 3.2 to 3.6.4 on Windows. The PoC triggers the vulnerability by creating a symlink with an excessively long path, potentially leading to arbitrary code execution or privilege escalation.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H